how to add a azure ad sid to account protection - SERP Analysis

https://learn.microsoft.com/en-us/answers/questions/1285925/endpoint-account-protection-local-group-membership

https://www.reddit.com/r/Intune/comments/1bwkatl/account_protection_add_user_to_local_admin_doesnt/

https://helpcenter.netwrix.com/bundle/PolicyPak/page/Content/PolicyPak/ItemLevelTargeting/EntraIDSIDs.htm

https://learn.microsoft.com/en-us/intune/intune-service/protect/endpoint-security-account-protection-policy

https://itspecialist.cloud/en/intune-account-protection-local-user-group-membership/

https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/understand-security-identifiers

https://community.spiceworks.com/t/adding-azuread-groups-permissions-in-windows-with-icacls/934714

https://niklastinner.medium.com/deny-local-log-on-for-azure-ad-accounts-98fef00bcd0b

https://learn.microsoft.com/en-us/answers/questions/305326/add-azuread-user-to-local-administrator-group

https://stackoverflow.com/questions/75695445/adding-sid-to-idtoken-in-azure-b2c

https://skotheimsvik.no/five-approaches-for-local-admin-access-on-the-azure-ad-joined-pc

https://cheapwindowsvps.com/blog/how-to-add-an-azure-ad-group-to-your-local-administrator-group-a-step-by-step-guide/

https://inthecloud247.com/using-a-sid-for-user-rights-in-the-intune-settings-catalog/

https://directaccess.richardhicks.com/2023/07/11/azure-conditional-access-certificates-with-sid-information-now-available/

https://serverfault.com/questions/53717/how-can-i-change-the-sid-of-a-user-account-in-the-active-directory

https://stackoverflow.com/questions/53599522/origin-of-user-sid-for-azure-ad-joined-device

https://svenbergendahl.com/secure-your-azure-ad-user-accounts-with-azure-identity-protection

https://call4cloud.nl/shadowadminpairs-administrator-protection/

https://docs.protegrity.com/10.1/docs/pmg/pmg_components_of_policy/pmg_working_with_member_sources/pmg_configuring_azure_ad_member_source/

https://petervanderwoude.nl/post/even-easier-managing-local-administrators/

https://www.sharepointeurope.com/how-to-deploy-azure-ad-laps-with-intune-step-by-step/

https://inthecloud247.com/assign-deny-local-log-on-user-right-to-an-azure-ad-group-by-using-microsoft-intune/

https://www.jeffgilb.com/managing-local-administrators-with-azure-ad-and-intune/

https://jannikreinhard.com/2021/09/25/add-azure-ad-user-and-group-into-a-local-group/

https://niklastinner.medium.com/convert-entra-roles-to-sids-132d93ea21fc

https://answers.microsoft.com/en-us/msoffice/forum/all/unable-to-add-entra-groups-to-administrators-group/788209e5-1421-457d-b552-99c61994c660

https://petri.com/how-to-manage-local-administrators-and-groups-with-intune/

https://jeffreyappel.nl/how-to-implement-defender-for-identity-and-configure-all-prerequisites/

https://aadinternals.com/post/devices/

https://www.oceanleaf.ch/local-admin-privilege-management-with-intune/

https://microsoft.github.io/Microsoft365DSC/resources/intune/IntuneAccountProtectionLocalUserGroupMembershipPolicy/

https://petervanderwoude.nl/post/enabling-remote-access-for-specific-users-on-azure-ad-joined-devices/

https://dirkjanm.io/obtaining-domain-admin-from-azure-ad-via-cloud-kerberos-trust/

https://www.alitajran.com/create-ad-ds-connector-account/

http://docs.pingidentity.com/solution-guides/single_sign-on_use_cases/htg_reg_azure_ad_devices_pf_windows10.html

https://www.anoopcnair.com/manage-local-admins-using-intune-group-mgmt/

https://miketerrill.net/2019/07/04/how-to-create-a-network-share-in-an-aad-only-environment/

https://u.rocheston.com/how-to-set-up-identity-protection-with-azure-active-directory/

https://blog.kloud.com.au/2017/04/11/joining-identities-between-active-directory-and-azure-active-directory-using-microsoft-identity-manager/

https://www.semperis.com/blog/how-to-defend-against-sid-history-injection/

https://dirteam.com/sander/2019/11/12/howto-properly-delegate-directory-access-to-azure-ad-connect-service-accounts/

https://github.com/winfsp/winfsp/issues/387

https://learn.microsoft.com/en-us/entra/identity/devices/assign-local-admin

https://www.youtube.com/watch?v=lwC5inJ3nBE&pp=0gcJCdgAo7VqN5tD

https://oliverkieselbach.com/2020/05/13/powershell-helpers-to-convert-azure-ad-object-ids-and-sids/

https://tech.nicolonsky.ch/Meeting-Windows-LAPS/

https://pentera.io/wp-content/uploads/2024/11/pentera_labs_youll_never_sidem_coming-1.pdf

https://petri.com/configure-windows-laps/

https://knowledge.broadcom.com/external/article/288858/app-control-adding-azure-ad-usersgroups.html

https://aadinternals.com/post/kerberos/

https://www.semperis.com/blog/active-directory-security/active-directory-security-best-practices-checklist/

https://blog.quest.com/sid-history-in-an-active-directory-migration-what-you-need-to-know/

https://directaccess.richardhicks.com/2024/11/12/powershell-script-to-display-user-or-computer-sid/

https://www.techtarget.com/searchwindowsserver/tutorial/How-to-perform-Azure-AD-bulk-operations-with-PowerShell

https://community.spiceworks.com/t/powershell-sid-to-user-and-user-to-sid/1005944

https://www.velessoftware.com/how-to-create-local-administrator-account-using-microsoft-intune/

https://activedirectorypro.com/find-user-sid-in-active-directory/

https://www.microfocus.com/documentation/idol/IDOL_12_12/SharePointRemoteConnector_12.12_Documentation/Help/Content/ResolveSIDs.htm

https://woshub.com/convert-sid-to-username-and-vice-versa/

https://www.sentinelone.com/blog/windows-sid-history-injection-exposure-blog/

https://www.linkedin.com/pulse/unknown-sid-administrators-group-raphael-perez

https://itspecialist.cloud/en/useful-resource-convert-azure-ad-objectid-sid/

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Analytics-Alert-Reference-by-data-source/User-added-SID-History-to-an-account

https://www.ninjaone.com/blog/how-to-find-user-security-identifier/

https://infrasos.com/find-sid-in-active-directory-users-and-computers-using-powershell/

https://www.varonis.com/blog/synthetic-sid

https://github.com/Ylianst/MeshCentral/issues/4531

https://learn.microsoft.com/en-us/azure/storage/files/storage-files-identity-ad-ds-enable

https://www.youtube.com/watch?v=Ziw9MClUfkc

https://community.splunk.com/t5/Security/How-to-link-SID-to-Security-ID/m-p/92070

https://blog.darrenjrobinson.com/joining-identities-between-active-directory-and-azure-active-directory-using-microsoft-identity-manager/

https://conditionalaccess.uk/using-intune-to-remove-local-admins/

https://www.oceanleaf.ch/windows-laps-guide/

https://www.pdq.com/powershell/add-localgroupmember/

https://sid-500.com/tag/active-directory/

https://forums.powershell.org/t/domain-sid-not-resolving-on-workgroup-pc/21348

https://documentation.solarwinds.com/en/success_center/arm/content/report-on-unresolved-sids.htm

https://www.youtube.com/watch?v=FpPJMWMWN5Y

https://superuser.com/questions/581042/is-it-possible-to-change-the-sid-of-a-local-user-account-manually

https://help.okta.com/asa/en-us/content/topics/adv_server_access/docs/ad-user-sync.htm

https://docs.ansible.com/ansible/latest/collections/microsoft/ad/user_module.html

https://www.microfocus.com/documentation/idol/IDOL_12_11/SharePointODataConnector_12.11_Documentation/Help/Content/ResolveSIDs.htm

https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Analytics-Alert-Reference-by-data-source/User-added-SID-History-to-an-account

https://en.wikipedia.org/wiki/Security_Identifier

https://yzhums.com/25881/

https://developer.slashid.dev/docs/access/guides/SSO/oauth_creds_azure

https://sid.siemens.com/r/A6V13063783/20490824971_22946666763__en-US_21698348811

https://call4cloud.nl/manage-local-administrators-group-intune/

https://joymalya.com/manage-local-admin-accounts-with-intune/

https://techcommunity.microsoft.com/blog/intunecustomersuccess/new-settings-available-to-configure-local-user-group-membership-in-endpoint-secu/3093207

https://www.techtarget.com/searchsecurity/definition/security-identifier

https://config.office.com/

https://docs.citrix.com/en-us/citrix-cloud/citrix-cloud-management/identity-access-management/saml-aad-and-aad-identities.html

https://access.redhat.com/solutions/7014290

https://www.synacktiv.com/en/publications/azure-ad-introduction-for-red-teamers

https://dev.to/winsides/3-best-ways-fix-account-unknown-s-1-5-21-issue-on-windows-11-2f5i

https://microsoft.public.windows.server.active-directory.narkive.com/B3FCZTVA/does-user-sid-ever-change

https://www.youtube.com/watch?v=5XPHEnoaBAA

https://docs.azure.cn/en-us/azure-sql/database/authentication-aad-overview

https://documentation.ubuntu.com/server/how-to/sssd/with-active-directory/